Legacy Option to force Two-Factor

[madmaxmangos]

Currently two-factor only kicks in when you're IP address changes. I would like to see the following options added...

• Account setting to force force two-factor authentication every time you login or inactive for a certain time (maybe a setting of hours could determine this?)
• Account setting to force two-factor authentication for login into the admin CP for those administrators who have it enabled

 

[Fillip H.]

We'll take it into consideration for future versions

 

[brock258]

+1

I work on a few sites - big and small. On large sites I run DUO Authentication (paid service). On smaller sites, I use the DBT 2 Factor Authentication plugin (free service provided by Google).

I would love the ability to force certain usergroups (admins, mods, staff) to authenticate via 2 Factor. (extra layer of security)

Right now, there's no easy way to see who has "authenticated" to improve the security of the site.